Refresh access token

POSThttps://app.speybooks.com/api/v1/auth/refresh

Exchange a valid refresh token for a new access token. The refresh token itself is not rotated and stays valid until it expires or is invalidated. A refresh token issued before a password change is rejected and the client must log in again.

Body parameters

refreshTokenstringrequired

Refresh token from the login response.

Response

200Returns a new access token. The refresh token remains valid.

Show response fields

accessTokenstring

expiresIninteger

Error codes

400No refresh token provided.

401Invalid, expired, or revoked refresh token.

429Rate limit exceeded.

RequestPOST/v1/auth/refreshcurl

curl -X POST https://api.speybooks.com/v1/auth/refresh \
  -H "Content-Type: application/json" \
  -d '{"refreshToken": "eyJ..."}'

Response200

{
  "success": true,
  "data": {
    "accessToken": "eyJ...",
    "expiresIn": 900
  }
}